Principal Security Engineer

About the role

At Parloa, security is integral to our operations and the AI platform we provide to enterprises managing sensitive voice and chat interactions. In the position of Principal Security Engineer, you will establish the security framework across our engineering teams, focusing on secure architecture and threat assessment while ensuring that security is embedded in our development processes. This role demands a proactive approach to defining and enhancing our security strategy and practices.

Key facts

What you'll do

• Develop and implement the technical security strategy for Parloa's platform, infrastructure, and AI/ML systems.
• Conduct comprehensive threat modeling and architectural assessments for both new and existing systems, including AI-driven voice and chat pipelines.
• Integrate secure design principles throughout the software development lifecycle, collaborating closely with engineering teams.
• Enhance detection, monitoring, and incident response capabilities across our cloud and AI infrastructures.
• Oversee security architecture for multi-tenant systems managing sensitive data for our enterprise clients.
• Assist in compliance and governance initiatives (e.g., SOC 2, ISO 27001) by ensuring robust technical controls are in place and documented.
• Mentor senior engineers and security professionals, fostering a culture of security awareness across the organization.
• Serve as a trusted technical advisor in discussions with enterprise clients and partners regarding security issues.
• Keep abreast of the evolving threat landscape in AI and voice/chat systems, proactively identifying new risks and mitigation strategies.

Requirements

• Over 15 years of experience in security engineering, with a proven track record at the Staff or Principal level.
• In-depth knowledge of application security and cloud security, including threat modeling and secure architecture for distributed, cloud-native systems.
• Practical experience with cloud security on platforms such as AWS, GCP, or Azure, as well as container orchestration using Kubernetes.
• Strong grasp of identity and access management, encryption, and secure data handling practices at an enterprise level.
• Experience in securing systems that process sensitive or regulated information, with familiarity in GDPR or similar regulations.
• A history of shaping security strategies and influencing engineering practices across an organization, rather than merely executing fixes.
• Excellent communication abilities, capable of articulating security risks and trade-offs to engineers, leadership, and clients.
• A genuine interest in AI systems and a proactive approach to understanding the security challenges they present.

Nice to have

• Experience with security frameworks and compliance standards relevant to enterprise environments.

Skills & tools

• Proficiency in security tools and technologies relevant to cloud and application security.
• Familiarity with security assessment methodologies and tools for threat modeling and risk analysis.

Practical notes

• Parloa is an e-verify employer in the USA.
• We are committed to diversity and provide equal opportunities to all qualified candidates regardless of race, gender, sexual orientation, age, religion, national origin, disability status, or socioeconomic background.
• All employees play a critical role in ensuring compliance with GDPR and ISO standards, including ISO 27001, in the handling of sensitive information.

Recruiter Interview → Technical Peer Interview → Expert Interview(s) → Bar Raiser

Why Parloa?

We are at the forefront of transforming customer experiences through AI that not only responds but comprehends, reasons, and acts. Our mission is to create AI that enterprises can trust with crucial customer interactions, ensuring every conversation is meaningful and effective. We are dedicated to raising the standard in customer service, and if you want to make a significant impact in how businesses and customers engage, this is your chance.

At Parloa, ownership is vital; it means being accountable for results, not just tasks. We operate in a fast-evolving sector, where high expectations and complex challenges are the norm. We seek individuals who are solution-oriented, clear communicators, and committed to excellence.

Backed by prominent global investors, we are on a path to becoming the leading provider of enterprise-grade conversational AI.